Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreSignature Wrapping Vulnerability with spring-security-saml2-service-provider
Description
Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation. When using the spring-security-saml2-service-provider component, a malicious user can carefully modify an otherwise valid SAML response and append an arbitrary assertion that Spring Security will accept as valid.
Affected Spring Products and Versions
Spring Security:
- 5.3.0 - 5.3.1
- 5.2.3 and earlier
Mitigation
Users of affected versions should upgrade to the corresponding fixed version.
| Fix version | Availability |
|---|---|
| 5.3.2 | OSS |
| 5.2.4 | OSS |
No further mitigation steps are necessary.
Credit
This issue was identified and responsibly reported by Sam Tinklenberg.
References
History
- 2020-05-07: Initial vulnerability report published.
Reporting a vulnerability
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy
Get support
Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreUpcoming events
Check out all the upcoming events in the Spring community.
View all